www.blogger.com - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned www.blogger.com and returned a unknown verdict (score -12). The page resolved to 172.217.25.169 on Google LLC in JP. The domain was registered 9924 days ago through MarkMonitor Inc.. 2 domains and 1 IP were contacted. 643 malware samples communicate with this URL (Gootloader). This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css - Domain: www.blogger.com · IP: 172.217.25.169 · AS15169 · JP
- Server: sffe
- HTTP status: 200 · text/css
- Registrar: MarkMonitor Inc. · domain age 9924 days · created 1999-06-22
- TLS issuer: C=US, O=Google Trust Services, CN=WR2 · valid to Oct 28 20: · subject CN=*.blogger.com
- Scan tier: fast · observed 2026-08-24 03:02:25 UTC
Malware communicating with this URL (643)
These samples were observed contacting or being served from www.blogger.com. Each links to its full analysis.
- b6e2b2eac6c6f27f51198ceaf779c4cf71f6a88aa9701df709a45c9469bfdbde - referenced ·
b6e2b2eac6c6f27f51198ceaf779c4cf· first seen 2026-08-24 - b6e286bc11d4d633019461ff11c031ed0c38e6eaefcba67e59881e79daa2eb06 - referenced ·
b6e286bc11d4d633019461ff11c031ed· first seen 2026-08-24 - b6e8b5fa383bb43957ce64b6f55454ce2285a8cc954f41c32c978eafcd6a7714 - referenced ·
b6e8b5fa383bb43957ce64b6f55454ce· first seen 2026-08-24 - b6e35666a1663be4d084420d20fcde7064ab2ea5b71efb2c1b71824e5d8ec880 - referenced ·
b6e35666a1663be4d084420d20fcde70· first seen 2026-08-24 - 9c49add66ce3c2cffe597afafc01040da218109c6a617a8d079cff99b0662118 - referenced ·
9c49add66ce3c2cffe597afafc01040d· first seen 2026-08-24 - b6edb20ee7343e42247cff7f4e75e0343c84ab4591af925a3c6c8344e5f5271b - referenced ·
b6edb20ee7343e42247cff7f4e75e034· first seen 2026-08-24 - e18c295e389d1c4f3c6c33d7c4b900fb3f741debd5d813f956499b1db71b9481 - referenced ·
e18c295e389d1c4f3c6c33d7c4b900fb· first seen 2026-08-24 - 065b74fc0c32c8f97b610367a600005a9984fa673820089535980f8089a4fdfe - referenced ·
065b74fc0c32c8f97b610367a600005a· first seen 2026-08-24 - b6e55690447eed0ad7543616c307467f939bfa1ff04d371c8164b0c407fe33cc - referenced ·
b6e55690447eed0ad7543616c307467f· first seen 2026-08-24 - c84440adcc52d6e8d2f0146522004104dce6d3cda3dd69cfa9b25c69b2059efd - referenced ·
c84440adcc52d6e8d2f0146522004104· first seen 2026-08-24 - 762823469d5728ec72150d6472623e1f482d4e96fdc960649a731872d5cc9b32 - referenced ·
762823469d5728ec72150d6472623e1f· first seen 2026-08-24 - b6ef4e501e4405466475d4ac1ecc08e2e4f99ab77316cbb057af29383fb58daf - referenced ·
b6ef4e501e4405466475d4ac1ecc08e2· first seen 2026-08-24 - Gootloader - referenced ·
b6e105c49523177a04f65400536984e3· first seen 2026-08-24 - f767892302c185fcd0cbc833dc246b214211f37de954513b3dcdd277ebb403de - referenced ·
f767892302c185fcd0cbc833dc246b21· first seen 2026-08-24 - b6e9587584884b0cff27204efbd740ccda5d47deb27e6261685d373974ca73e3 - referenced ·
b6e9587584884b0cff27204efbd740cc· first seen 2026-08-24
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 172.217.25.169 - AS15169 Google LLC (Japan)
Observed indicators
- www.blogger.com
- resources.blogblog.com
- 172.217.25.169
- https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css
- https://resources.blogblog.com/img/widgets/s_top.png
- https://resources.blogblog.com/img/widgets/s_bottom.png
Other scans of www.blogger.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.blogger.com/feeds/983411471944363842/posts/default - 24 Aug 2026 - unknown ·
http://phimhddd.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://phimhddd.blogspot.com/search/label/M%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%83%C3%83%C2 - 24 Aug 2026 - suspicious ·
https://www.blogger.com/static/v1/jsbin/1957234192-lbx__pt_br.js - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://istana-sepeda.blogspot.com/2012/04/fork-rst-first-platinum-travel-100.html - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/feeds/posts/default?alt=rss - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/feeds/posts/default - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/2010/07/wejangan-dewa-ruci-cerita-dalam_9537.html - 24 Aug 2026 - unknown ·
http://agamakejawen.blogspot.com/favicon.ico
Questions about www.blogger.com
- Is www.blogger.com safe?
- The scan of www.blogger.com on 24 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.blogger.com?
- 643 analysed samples communicate with this URL, including Gootloader.
- How was www.blogger.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.blogger.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan